Microsoft Entra ID authentication and authorization

different examples of implementing UIs, APIs using Microsoft Entra ID as the token server.

• Login and use an ASP.NET Core API with Microsoft Entra ID Auth and user access tokens
• Angular SPA with an ASP.NET Core API using Microsoft Entra ID Auth and user access tokens
• Restricting access to an Microsoft Entra ID protected API using Microsoft Entra ID Groups
• Using Azure CLI to create Azure App Registrations
• Improving application security in an ASP.NET Core API using HTTP headers

[!NOTE]
Switch to BFF security

It is now recommended to use backend for frontend security instead of two separate applications with seperate security contexts.

See the following for implementation details:

https://github.com/damienbod/bff-aspnetcore-angular

History

• 2023-11-26 Updated .NET 8
• 2023-11-03 Updated packages, fix security headers
• 2023-08-14 Updated packages
• 2023-04-28 Updated packages
• 2023-03-11 Updated Security Headers to always apply
• 2023-03-02 Updated Microsoft.Identity.Web 2.5.0, updated Angular
• 2023-01-10 Updated the .NET 7
• 2022-10-09 Updated packages
• 2022-06-20 .NET 6 styles
• 2022-02-10 Updated namespaces
• 2022-01-08 Updated Angular packages, Nuget packages
• 2021-12-01 Updated Angular packages
• 2021-11-02 Update to .NET 6
• 2021-08-13 Security headers and api update
• 2021-07-01 Updated Microsoft.Identity.Web and packages
• 2021-05-13 Updated Microsoft.Identity.Web to 1.9.2 and packages
• 2021-04-15 Updated Microsoft.Identity.Web to 1.9.1
• 2021-03-05 Switch to SPA with refresh tokens due to IFrame problems
• 2021-02-28 Updated Microsoft.Identity.Web to 1.7.0
• 2021-02-13 Updated Microsoft.Identity.Web to 1.6.0, added MSAL exception handling
• 2021-01-31 Updated Microsoft.Identity.Web to 1.5.1
• 2021-01-02 Updated Microsoft.Identity.Web to 1.4.1
• 2020-12-05 Updated to .NET 5, Angular 11.0.3, oidc lib
• 2020-11-15 Updated Microsoft.Identity.Web to 1.3.0, Angular 11
• 2020-10-25 Updated Microsoft.Identity.Web to 1.2.0
• 2020-10-08 Updated Microsoft.Identity.Web to 1.1.0
• 2020-09-30 Updated Microsoft.Identity.Web to 1.0.0
• 2020-09-11 Updated Microsoft.Identity.Web to 0.4.0-preview
• 2020-08-27 Updated Microsoft.Identity.Web to 0.3.0-preview
• 2020-08-09 Updated Nuget packages, Updated Microsoft.Identity.Web to 0.2.2-preview

Links

https://github.com/damienbod/bff-aspnetcore-angular

https://github.com/AzureAD/microsoft-identity-web

https://github.com/Azure-Samples/active-directory-aspnetcore-webapp-openidconnect-v2

https://jwt.io/

https://www.npmjs.com/package/angular-auth-oidc-client